update for sun-java package

[Niels Thykier]

On 2012-03-14 03:43, Willian Braga wrote:
> Hello Maintainers:
> 

Hi,

> My name's Willian and I'm a Linux Mint 12 user (wheezy/sid in
> /etc/debian_version)
> 

:)

> I was checking the plugins I'm using in Firefox with Plugin Check page (
> http://www.mozilla.org/en-US/plugincheck/) and it reported me that my Java
> plugin is outdated. Also, they told me there are some security risk running
> this outdated version. The version it reported me was 1.6.0_26, which is
> the same I'm using over here. I was reading the changelog from version from
> 1.6.0_27 to 1.6.0_31 and there are some security vulnerabilities which were
> fixed, but we are missing them because the official debian package is not
> updated. Those security are below:
> 

I am a bit pedantic here, but there never was an "official Debian
package" for sun-java (it was non-free and therefore not a "part of
Debian").

> [...]
> 
> So I would like to know if you guys could update it. I know how to manually
> update it, but i think it's important to update the debian package as well
> because it would update all Debian users and alike.
> 
> [...]
>
> Thanks,
> 
> Willian.
> 
> 

Unfortunately we cannot.  Oracle no longer provides "sun-java" (or
"oracle-java") under a license we can use for distributing the non-free
Java[1].
  We can offer you is openjdk-6 or openjdk-7; I know there have been
(and probably still are) cases were openjdk did not work as well as
sun-java.  If you experience such with openjdk, I would highly recommend
you report those so those issues can be fixed.
  If openjdk is simply not a feasible alternative, I believe that the
package "java-package" (in sid/Wheezy) can be used to construct a "deb"
from the manual downloaded sun-java.  It has the advantage that dpkg/apt
is aware of your local Java installation and will use that if possible.

~Niels



[1]
http://sylvestre.ledru.info/blog/sylvestre/2011/08/26/sun_java6_packages_removed_from_debian_u

http://sylvestre.ledru.info/blog/sylvestre/2011/10/25/removal_of_sun_java6_from_debian

http://mrpogson.com/2011/12/14/sun-java-no-longer-welcome-in-debian-gnulinux/